This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json) Hash identifier: QBBF/Au7hhzDcwn2kJmcaRxVp6A/qwY5Q9KxXjevtIc= Subject key identifier: 97:35:3C:EB:D0:17:1A:AE:D2:96:B9:C0:EF:75:D5:F5:CC:62:A3:AD Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24 Certificate serial: 019C43595F4875C2BF0201147D05F6DF676C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft Manifest number: 01E0 Signing time: Mon 09 Feb 2026 17:00:56 +0000 Manifest this update: Mon 09 Feb 2026 17:00:56 +0000 Manifest next update: Tue 10 Feb 2026 17:00:56 +0000 Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=) 2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: FWYO5GZIUqrpLHj//35ghUwuc8ahZnzy6gPb6819aoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:5f:48:75:c2:bf:02:01:14:7d:05:f6:df:67:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24 Validity Not Before: Feb 9 17:00:56 2026 GMT Not After : Feb 10 17:00:56 2026 GMT Subject: CN=97353cebd0171aaed296b9c0ef75d5f5cc62a3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:ae:8b:4d:09:b4:74:4f:15:ca:ad:b3:36: c4:dc:e2:d2:70:61:0a:59:45:94:6c:d5:3b:09:a3: 38:d7:24:4b:08:c8:84:59:20:9a:a1:39:31:43:df: 0e:32:e6:b4:46:13:cd:d7:d6:37:46:80:f3:c7:77: d4:c6:6a:31:4f:77:2e:1c:89:0a:24:eb:53:84:89: 5e:23:34:f0:e9:17:ef:da:18:7a:5f:d1:67:8a:1b: ea:54:c6:b3:63:80:47:7e:e1:6a:dd:5e:30:6c:82: 09:65:a5:11:d1:4a:95:da:c4:56:4d:90:9b:f9:41: ac:a6:1c:90:3c:c3:52:a8:93:b4:50:bf:37:1e:0a: 2c:97:35:fa:05:04:84:b4:0a:89:de:3b:d9:04:c4: a3:fd:f3:06:20:4f:a2:5b:b6:c0:76:db:b5:fd:ca: f8:76:3e:f7:04:cf:73:16:97:8b:53:b9:a5:d0:68: 7d:fe:f1:c5:47:9d:f1:4d:ff:64:fe:61:61:ae:45: c2:5f:6a:3d:f1:80:e7:f8:e6:68:6d:c8:30:26:58: b7:b3:a2:ee:71:3f:44:d1:72:dc:04:33:2f:e6:04: ca:70:4b:0b:6b:06:fb:3b:35:8d:1f:6d:65:e4:c9: 18:57:cb:3c:90:ea:00:17:ae:f0:d0:98:59:68:89: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:3C:EB:D0:17:1A:AE:D2:96:B9:C0:EF:75:D5:F5:CC:62:A3:AD X509v3 Authority Key Identifier: keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8b:44:48:a1:ff:02:18:33:73:77:94:69:f6:da:0d:64:5e: 94:11:e8:5a:f2:68:94:1b:f9:85:ff:98:e9:c2:b7:cb:79:42: df:8f:31:12:1e:85:a3:3f:2c:3f:bb:a1:a6:cf:cb:fa:e3:1a: 72:70:a5:93:c8:0b:cd:b9:ba:f9:f2:62:da:26:4c:4d:bd:02: 5c:be:90:ff:79:f0:a4:f4:52:c7:56:f0:fe:f1:fd:ba:47:ed: 53:42:cd:69:8c:e6:06:cb:61:d0:5a:24:2d:2b:87:cd:06:71: 12:09:37:f0:36:e8:93:58:f5:9e:69:57:c5:70:76:7d:40:f6: 75:02:4e:f9:27:49:aa:cc:6e:bb:be:25:d9:dc:78:df:74:12: 20:9a:f5:87:bf:11:0a:8b:4f:11:1a:7d:02:c7:e0:ca:cf:81: 3a:9b:f5:a1:7a:14:45:e3:b5:e3:69:6f:bd:55:03:a5:f0:29: cd:28:93:1e:96:7c:84:c9:25:82:b9:3a:62:19:7b:2b:bf:09: a1:5c:b2:24:77:a2:c0:3e:f6:dd:42:38:51:8c:e3:c9:41:54: 75:25:86:8f:26:f9:fd:a8:56:22:bd:bd:39:b8:51:12:a2:37: 97:19:00:2d:54:37:d1:5a:2c:20:97:b2:fc:e2:a1:85:38:39: 17:9d:bb:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWV9IdcK/AgEUfQX232dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzljZWY0NThkZTUwMzkyZTNjMDJiNjkxODJmMzRjNjAx NDhkMjQwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD Eyg5NzM1M2NlYmQwMTcxYWFlZDI5NmI5YzBlZjc1ZDVmNWNjNjJhM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqeui00JtHRPFcqtszbE3OLScGEK WUWUbNU7CaM41yRLCMiEWSCaoTkxQ98OMua0RhPN19Y3RoDzx3fUxmoxT3cuHIkK JOtThIleIzTw6Rfv2hh6X9FnihvqVMazY4BHfuFq3V4wbIIJZaUR0UqV2sRWTZCb +UGsphyQPMNSqJO0UL83HgoslzX6BQSEtAqJ3jvZBMSj/fMGIE+iW7bAdtu1/cr4 dj73BM9zFpeLU7ml0Gh9/vHFR53xTf9k/mFhrkXCX2o98YDn+OZobcgwJli3s6Lu cT9E0XLcBDMv5gTKcEsLawb7OzWNH21l5MkYV8s8kOoAF67w0JhZaIl3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc1POvQFxqu0pa5wO911fXMYqOtMB8GA1UdIwQY MBaAFI55zvRY3lA5LjwCtpGC80xgFI0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMt Y2MxMjA4MTQ4NzI5LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMtY2MxMjA4MTQ4NzI5 LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4tESKH/ Ahgzc3eUafbaDWRelBHoWvJolBv5hf+Y6cK3y3lC348xEh6Foz8sP7uhps/L+uMa cnClk8gLzbm6+fJi2iZMTb0CXL6Q/3nwpPRSx1bw/vH9ukftU0LNaYzmBsth0Fok LSuHzQZxEgk38Dbok1j1nmlXxXB2fUD2dQJO+SdJqsxuu74l2dx433QSIJr1h78R CotPERp9Asfgys+BOpv1oXoUReO142lvvVUDpfApzSiTHpZ8hMklgrk6Yhl7K78J oVyyJHeiwD723UI4UYzjyUFUdSWGjyb5/ahWIr29ObhREqI3lxkALVQ30VosIJey /OKhhTg5F527Vw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:16 2026 by rpki-client